feat: add master agent task recovery endpoint

tests/admin-backoffice-bff-route.test.ts

@@ -273,6 +273,27 @@ test.beforeEach(async () => {
       createdAt: now,
     },
   ];
+  state.masterAgentTasks = [
+    {
+      taskId: "task-stale",
+      projectId: "project-acme",
+      taskType: "conversation_reply",
+      requestMessageId: "message-stale-request",
+      requestText: "请继续处理 Acme 生产项目的等待回复。",
+      executionPrompt: "继续 Acme 生产项目的 conversation_reply，并回写安全摘要。",
+      requestedBy: "开发同事",
+      requestedByAccount: "dev@acme.com",
+      deviceId: "win-1",
+      status: "running",
+      phase: "awaiting_reply",
+      requestedAt: "2026-04-30T08:00:00+08:00",
+      claimedAt: "2026-04-30T08:01:00+08:00",
+      lastProgressAt: "2026-04-30T08:01:00+08:00",
+      leaseExpiresAt: "2026-04-30T08:02:00+08:00",
+      attemptCount: 1,
+      maxAttempts: 2,
+    },
+  ];
   await data.writeState(state);
 });
 
@@ -370,6 +391,13 @@ test("backoffice bff exposes yudao style management contract without secrets", a
     ["Boss API", "OTA", "Codex Provider", "Computer Use", "Skill Hub"],
   );
   assert.equal(payload.insights.riskAggregates.some((item: { label: string }) => item.label === "设备离线"), true);
+  assert.equal(payload.insights.dataSafetySummary.restorePointCount >= 0, true);
+  assert.match(payload.insights.dataSafetySummary.rpoLabel, /文件 MVP|企业标准/);
+  assert.equal(Array.isArray(payload.insights.taskRiskSummary.rows), true);
+  assert.equal(typeof payload.insights.taskRiskSummary.counts.stale, "number");
+  const staleTask = payload.insights.taskRiskSummary.rows.find((row: { taskId: string }) => row.taskId === "task-stale");
+  assert.equal(staleTask?.stale, true);
+  assert.equal(staleTask?.phase, "awaiting_reply");
   assert.equal(payload.yudaoMapping.tenant, "adminCompanies");
   assert.equal(payload.yudaoMapping.user, "authAccounts");
   assert.equal(payload.yudaoMapping.role, "BOSS_PERMISSION_TEMPLATES");